In recent years, smartphone thieves developed a predatory tactic known as “shoulder surfing”—watching a victim type their 4- or 6-digit passcode in a crowded bar or train before snatching the physical phone. With your device passcode in hand, a thief could traditionally access iCloud Keychain passwords, drain banking accounts, and change your Apple ID password to lock you out of Find My permanently. Beginning in iOS 17.3, Apple introduced Stolen Device Protection, an advanced security layer that renders stolen passcodes useless when away from familiar locations.
How Stolen Device Protection Safeguards Your Data
When your iPhone is away from familiar locations like home or work, Stolen Device Protection enforces strict biometric barriers:
- Mandatory Face ID / Touch ID: Accessing saved passwords in iCloud Keychain, viewing credit cards, turning off Lost Mode, or applying for an Apple Card strictly requires biometric authentication—no passcode fallback is allowed.
- One-Hour Security Delay: Changing sensitive security settings—such as updating your Apple ID password, altering your iPhone passcode, or turning off Find My—requires Face ID authentication followed by a one-hour waiting period and a second biometric confirmation before the change takes effect.
Requirements Before Turning On Stolen Device Protection
Ensure these standard Apple security features are enabled on your iPhone:
- Two-Factor Authentication for your Apple ID.
- A device Passcode, Face ID (or Touch ID).
- Significant Locations: Go to Settings > Privacy & Security > Location Services > System Services > Significant Locations and ensure it is switched On.
How to Enable Stolen Device Protection in iOS Settings
Activating this essential protection takes less than two minutes:
- Open the Settings app on your iPhone (running iOS 17.3 or newer).
- Scroll down and tap on Face ID & Passcode (or Touch ID & Passcode).
- Enter your current lock screen passcode.
- Scroll down to the Stolen Device Protection section.
- Tap on Turn On Protection (or tap into the menu to configure options).
- Under Require Security Delay, choose between:
- Away from Familiar Locations: Applies delays only when away from home and office.
- Always: Recommended for maximum security; enforces the one-hour delay regardless of location.
Enabling Stolen Device Protection ensures that even if someone manages to see your passcode and take your iPhone, your identity, bank accounts, and Apple ID remain completely untouchable.